Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File:                     ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier:          pQLFD981C8bBle7l4EJOpoyoZ82SafW3n5PTUyLDBTA=
Subject key identifier:   90:55:10:1E:F2:3B:73:09:AA:73:D9:A1:5E:95:16:0D:4A:57:DE:AA
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer:       /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial:       019E3004BA90E095CEC553E2E43A254461FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number:          0D76
Signing time:             Sat 16 May 2026 09:01:16 +0000
Manifest this update:     Sat 16 May 2026 09:01:16 +0000
Manifest next update:     Sun 17 May 2026 09:01:16 +0000
Files and hashes:         1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: OkG3Vwb46YhXXP+Qx/phTCJGI00nZSaDpkrNxDQTsWU=)
                          2: R54X7zTNG912i2EvC7AKSQH7Vtc.roa (hash: t8SIcyAg5d0NiVmbOss6KTkA5q+y1vbgNzl8dJK1AX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:ba:90:e0:95:ce:c5:53:e2:e4:3a:25:44:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
        Validity
            Not Before: May 16 09:01:16 2026 GMT
            Not After : May 17 09:01:16 2026 GMT
        Subject: CN=9055101ef23b7309aa73d9a15e95160d4a57deaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:dc:d6:f8:e5:37:9d:18:16:29:bd:bd:ea:
                    30:b1:f6:13:7c:ba:7b:0c:7a:10:b6:b8:47:92:18:
                    c0:8f:08:7c:76:f0:e0:02:e6:d3:74:76:05:b7:42:
                    51:62:84:e7:cc:7c:6d:2e:b6:d5:41:b6:3e:fa:b2:
                    b2:4c:15:e1:83:63:11:f3:ff:64:28:33:3b:74:60:
                    f5:a3:fe:d0:7b:d9:f6:50:d2:d5:59:ef:cb:82:2c:
                    fc:92:e6:ee:fa:20:e9:a2:8e:57:5e:a3:70:a3:92:
                    0c:22:36:76:e6:85:b8:cf:42:5e:ef:72:19:35:fb:
                    4f:98:ec:1f:dc:aa:5d:05:08:e6:27:fc:ca:2e:00:
                    6f:50:39:2c:78:11:c3:5b:a7:21:ee:9a:cf:04:2e:
                    d5:84:f4:96:d2:84:a3:50:5c:6a:d6:d9:76:6a:fe:
                    2c:1c:74:34:75:44:1f:00:ea:e1:94:5b:70:36:59:
                    82:f8:f1:4f:92:0b:8f:e2:21:13:95:14:cd:ab:f3:
                    8c:09:5e:67:80:fe:d1:8b:27:a8:05:f0:6a:42:45:
                    46:1c:ef:f7:4c:23:13:ec:64:08:e5:9f:f7:4b:4a:
                    74:5b:2e:c6:1d:8d:07:60:3a:91:31:8d:4c:7c:b4:
                    8d:14:9f:f3:ec:c4:13:d7:c4:f7:19:9d:82:48:12:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:55:10:1E:F2:3B:73:09:AA:73:D9:A1:5E:95:16:0D:4A:57:DE:AA
            X509v3 Authority Key Identifier:
                keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:a7:bc:86:87:b2:d2:e6:91:2b:f5:3e:0b:93:ab:a2:a8:
         9f:a4:a6:bc:fb:c1:9b:70:71:2e:e4:9a:74:af:77:81:8d:70:
         71:03:eb:62:15:dd:1f:9a:ff:1c:64:2a:9b:6d:5e:d9:48:f4:
         f4:6d:46:a7:5d:30:86:28:a1:33:be:d1:02:be:e0:91:80:c9:
         76:16:3f:f7:e9:3e:1b:6e:fc:17:30:6f:71:27:61:be:f4:01:
         31:0c:ec:88:2a:ff:40:b3:ed:cb:74:a8:73:89:92:40:aa:af:
         7f:8e:45:fc:58:c3:c9:33:d1:6e:29:c1:33:ed:be:f6:70:52:
         2f:4f:a4:c9:e5:d9:4f:d9:0a:cd:dc:ba:68:0a:e9:9c:94:e9:
         e9:aa:c9:1f:f3:c6:a3:b4:f1:35:53:b9:00:53:cb:3e:8c:d0:
         66:ad:51:50:3d:8d:8a:dd:ca:60:90:9a:74:b5:80:2f:4f:13:
         2b:17:bc:01:06:b4:fd:ac:18:31:c2:89:59:76:ca:85:4e:79:
         c2:26:b0:b9:5a:7e:b5:1b:bd:13:a5:b6:8b:f8:fc:bf:85:b2:
         cc:2b:42:c9:bb:91:14:dc:c6:7b:6b:4c:6e:f4:fc:55:4c:97:
         35:82:b8:2f:af:5c:f1:2d:ad:1f:5a:ac:4f:d0:25:e4:e4:5d:
         8f:e3:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:25 2026 by rpki-client